spot-bin
LOW
maintainer kopytkg
0 votes
scanned 2026-10-21 13:31:17.016028
Why flagged
Package builds from a prebuilt binary hosted on GitHub releases, which is normal for AUR packages; the source is from the project's official repository, and the binary is not obfuscated or executed remotely.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): Package builds from a prebuilt binary hosted on GitHub releases, which is normal for AUR packages; the source is from the project's official repository, and the binary is not obfuscated or executed remotely.
PKGBUILD
1
# Maintainer: Martin Kopecký <kopecky@thekrew.app>
2
pkgname=spot-bin
3
pkgver=0.1.0
4
pkgrel=1
5
pkgdesc='TOML+CSS dialog runtime for Wayland (layer-shell overlays), prebuilt binary'
6
arch=('x86_64')
7
url='https://github.com/KopyTKG/spot'
8
license=('MIT')
9
depends=('glibc' 'gtk4' 'gtk4-layer-shell')
10
provides=('spot')
11
conflicts=('spot' 'spot-git')
12
13
_release="$url/releases/download/v$pkgver"
14
source=("spot-$pkgver::$_release/spot-linux-x64"
15
"LICENSE-$pkgver::https://raw.githubusercontent.com/KopyTKG/spot/v$pkgver/LICENSE")
16
noextract=("spot-$pkgver")
17
sha256sums=('4eba039285c5563741a510a66eb8485811e6d5b38203ec612665c6162e3fbe43'
18
'e41890a77c45861b0d2213e1c192b441725327e8bea70d7ffc3d3618c2f65bdf')
19
20
package() {
21
install -Dm755 "$srcdir/spot-$pkgver" "$pkgdir/usr/bin/spot"
22
install -Dm644 "$srcdir/LICENSE-$pkgver" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
23
}
24
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-21 13:31:17 | Low | 2 |